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Electric or electronic circuit arrangement and method of protecting said circuit arrangement 
from manipulation and/or abuse 



Ul 



The present invention relates to an electric or electronic circuit arrangement 
comprising at least one, particularly layered carrier substrate of a semiconducting or 
insulating material, at least one integrated circuit constituted by at least two spaced, 
particularly lithographically applied conductor tracks on the carrier substrate, at least one 
O 5 dielectric shielding layer, particularly an insulation layer and/or passivation layer and/or a 
Q further protective layer situated between the conductor tracks aiKl'or laterally with respect to 

the conductor tracks and/or on the conductor tracks, provided for protecting the integrated 
circuit from external influences so that the integrated circuit has a specific, particularly lateral 
and/or particularly parasitic capacitance determined by the dielectric shielding layer. 
1 0 The invention also relates to a method of protecting an electric or electronic 

circuit arrangement formed in this way from manipulation and/or abuse. 

In connection with the protection from manipulation and/or abuse, the general 
trend is that the security requirements, particularly in the field of the smart card chip 
technique, become more stringent with an increasing use of smart cards such as, for example, 
15 bank cards, sickfimd cards or various security chip cards. All of these chip cards have in 
common that sensitive data are stored which should be solely and exclusively accessible to 
the authorized user of the chip card within the scope defined hereinbefore. In this connection, 
it is usually the aim of unauthorized persons to read information from the chip card or 
analyze the functional components of the chip so as to use the chip card for abusive purposes. 
20 A manipulative possibility of obtaining xinauthorized information about the 

structure and/or the function of chip cards is offered by the chemical or mechanical removal 
of the dielectric shielding layer, particularly the passivation layer, for the purpose of 
electrical or electronical analysis by means of touching the conductor tracks with (measuring) 
needles to be put on the conductor tracks and/or for the purpose of optical analysis of the 
25 functional components by means of a microscope. In this way, software-defined barriers may 
be at least partly overcome without authorization. To be able to satisfy the security 
requirements resulting from these risks of abuse, a concept will be required which combines 
active and passive security structures such as (photo)sensors and passivation layers. 
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An arrangement of the type described in the opening paragraph is known from 
DE 197 38 990 Al . In the arrangement for protecting a chip card from abuse, as described in 
this document, the dielectrical properties of a passivation layer on the chip of a chip card are 
scaimed by means of a capacitance influenced by the passivation layer. To this end, an 
5 oscillator is used whose oscillation frequency is determined by said capacitance. The actual 
oscillation frequency is compared with a nominal value by clocking a counter in a given time 
interval and the final coxmt is used as a measure for the actual oscillation frequency. 

The number of the count made available by the counter may additionally be 
combined with a personal, specific number by means of a freely selectable combination 
10 algorithm so as to obtain a fijrther nimiber, and the number made available by the counter or 
the fiirther number may be optionally compared with a reference value. 

It is true that this known arrangement impUes a number of advantages such as 
the possibility of preventing abuse due to chip manipulation by means of sensitive 
capacitance scanning in the capacitance arrangement in the dielectric protective layer 
1 5 shielding the chip, but the envisaged "capacitate sensor" in the arrangement disclosed in DE 
197 38 990 Al is not obtained until after the chip to be protected has been mounted on a card 
by providing an appropriate protective lacquer and is capable of fimctioning in this way only. 

Based on these drawbacks and shortcomings of the conventional 
arrangements, it is an object of the present invention to provide an electric or electronic 
20 circuit arrangement of the type described in the opening paragraph, as well as a method of 
protecting an electric or electronic circuit arrangement from manipulation and/or abuse, in 
which, in contrast to the prior art, a complete integration of the envisaged "capacitive 
detector" in the (semiconductor) chip is possible without electric connections to the exterior - 
possibly via contact pads - being required and independent of the fact how the 
25 (semiconductor) chip is eventually used. Furthermore, elaborate assembling operations in the 
actual manufacture of the chip cards are prevented by using the present invention. 

This object is solved by the characteristic features defined in claim 1 for an 
electric or electronic circuit arrangement and by a method, defined in claim 12, of protecting 
an electric or electronic circuit arrangement from manipulation and/or abuse. Advantageous, 
30 fiirther embodiments of the present invention are defmed in the dependent claims. 

In accordance with the teaching of the present invention, the "capacitive 
detector", which may also be referred to as "passivation layer sensor", prevents or at least 
impedes manipulative attacks on an integrated circuit constituted by at least two spaced 
conductor tracks provided particularly lithographically on a carrier substrate. In this 
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connection, the concept of the "capacitive detector" or "passivation layer sensor" is based on 
the use of lateral parasitic capacitances which result from the neighborhood of the at least 
two conducting, preferably mutually independent conductor tracks. 

When the at least one dielectric shielding layer, particularly in the form of at 
5 least an insulation layer and/or at least a passivation layer and/or at least a further protective 
layer, provided for protecting the integrated circuit from external influences, is at least 
partially removed for manipulative and/or abusive purposes by an vmauthorized person, the 
relative dielectricity value of the insulation layer and/or passivation layer and/or further 
protective layer situated between the conductor tracks and/or laterally to the conductor tracks 
10 and/or on the conductor tracks will be changed. This change Asr of the relative dielectricity 
value leads to a change AC of the specific capacitance in accordance with the formula 
AC = So • ASr • h • 1/d, in which 

- So = 8.8542-10*^^ A s V'^ m"^ is the field constant, 

- h is the height of the conductor tracks, 

15 - 1 is the length of the conductor tracks, and 

- d is the distance between the first conductor track and the second conductor track. 

When the passivation layer has a relative dielectricity value Sr of 3.9 or even 
7.5 in the case of a shielding silicon nitrite layer, this relative dielectricity value changes after 
complete removal of the passivation layer to Sr,Luft 1? i.e. the lateral parasitic capacitances 
20 resulting from the neighborhood of the at least two conducting, preferably mutually 
independent conductor tracks change by a high factor. 

The evaluation of this capacitance change may be realized as an absolute 
measurement or as a relative measiirement. When the lateral parasitic capacitance is 
integrated in an appropriate oscillator circuit such as, for example, an RC oscillator circuit or 
25 an LC oscillator circuit, a capacitive sensor can be realized to some extent by evaluating the 
frequency change resulting from the dielectricity change. 

A differential evaluation of the capacitance change described hereinbefore is 
realized in two steps. 

In a first step, the "passivation layer sensor" formed by at least two conductor 
30 tracks suitably arranged in parallel and covered by at least one passivation layer is connected 
to at least one signal-generating unit, particularly to at least one oscillator \mit. The 
capacitance change causes a change of the oscillation frequency. 

In a second step, at least two preferably digital counting units are used, in 
which a first counting unit is clocked at the output frequency of the signal-generating unit. 
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and a second counting unit is clocked at a reference frequency. When the first counting unit 
reaches a given predetermined value, the count between the first counting unit and the second 
counting unit is compared in at least one comparator unit. In the normal case (dielectric 
shielding layer is neither chemically nor mechanically attacked, or not removed, i.e. the 
5 dielectric shielding layer is in good order) the comparison of the count does not lead to an 
error indication, whereas in the case of manipulation or abuse (dielectric shielding layer is 
chemically and/or mechanically attacked or removed, i.e. the dielectric shielding layer is out 
of order) an error indication is generated from the resultant changed frequency. 

In summary, it can be concluded that the present invention provides an electric 
10 or electronic circuit arrangement as well as a method of protecting an electric or electronic 

O 

□ circuit arrangement from manipulation and/or abuse in which - as a delimitation of the 

arrangement disclosed in DE 197 38 990 Al - a complete integration of the envisaged 
yn "capacitive detector" in the (semiconductor) chip is possible without electric coimections to 

the exterior - possibly via contact pads - being required and independent of the fact how the 
1 5 (semiconductor) chip is eventually used. Furthermore, the present invention precludes 
elaborate assembling operations in the actual manufacture of the chip cards. 

These and other aspects of the invention are apparent from and will be 
elucidated with reference to the embodiments described hereinafter. 

20 

In the drawings: 

Fig. 1 shows, in a diagrammatical cross-section^ an integrated circuit 
constituted by two spaced conductor tracks provided on a carrier substrate, and 

Fig. 2 shows diagrammaticaliy an embodiment of a circuit arrangement in 
25 accordance with the present invention. 

Identical or similar embodiments, elements or characteristic features are 
denoted by identical reference signs in Figs. 1 and 2. 



30 The circuit arrangement 100, shown in Fig. 2, to be implemented and/or 

integrated in a chip card or smart card comprises a layered carrier substrate 10 of a 
semiconducting material including processed circuits and conductor tracks up to the 
penultimate metal plane, as is shown in Fig. 1 in a cross-section. Accordingly, an integrated 
circmt constituted by two spaced (d) conductor tracks 20, 25 provided lithographically and 
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arranged sectionally parallel to each other and/or in a meandering intenneshing 
configuration, in which a first dielectric shielding layer in the form of a passivation layer 30 
for protecting the integrated circuit from external influences (cf. Fig. 1) is provided between 
and laterally to tiie conductor tracks 20, 25. 
5 A dielectric shielding layer in Ihe form of a fiirther protective layer 35, also for 

protecting the integrated circuit firom external influences, is further provided on the conductor 
tracks 20, 25, so that the integrated circuit has a specific lateral parasitic capacitance C = Cio 
+ C30 + C35 substantially determined by the two dielectric shielding layers 30, 35 formed 
fi:om an opaque material (Cio is the specific capacitance of the carrier substrate 10). 
^ 10 When one or both dielectric shielding layers in the form of the passivation 

□ layer 30 and the further protective layer 35 are at least partially removed, the relative 

dielectricity value of the dielectric shielding layers situated between the conductor tracks 20, 
W 25, laterally to the conductor tracks 20, 25 and on the conductor tracks 20, 25 changes. 

IP Since the signal-generating unit 40 in the form of an oscillator unit (== 

1 5 oscillator circuit consisting of a capacitive imit, namely a capacitor, and a resistive unit, 
H= namely a resistor) is connected to the contact terminals 22 and 27 of the conductor tracks 20 

j,^ and 25, respectively, in which the output jfrequency fmeas. of this unit is defined by the specific 

Jgl capacitance C = Cio + C30 + C35, the specific capacity change AC = eo • ASr • h * 1/d caused by 

the change of the relative dielectricity value ASr acts immediately on tiie output ft^equency 
20 fmeas. generated in the signal-generating unit 40. 

This signal-generating unit 40 in the form of the RC oscillator unit operates in 
a reliable manner within a wide voltage and temperature range and at a low current 
consumption. 

The system firequency which is necessary for operating the chip may be 
25 utilized as the reference firequency fref. A further possibility is the use of an additional 
oscillator having a stmcture which is similar to that of the oscillator for the measuring 
fi-equency, whose fi-equency-determining elements are, however, accommodated in another 
insulating layer. 

An essential advantage of the signal-generating xmit 40 in the form of the RC 
30 oscillator unit is the large voltage and temperature range in which the RC oscillator xmit 

operates. When the "capacitive detector", which may also be referred to as "passivation layer 
sensor", is removed, the oscillation is not interrupted or oscillates at an infinitely large 
fi-equency, but is only increased to a multiple of the previous normal frequency. 
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The signal-generating unit 40 precedes a first digital counting unit 50 clocked 
at the output frequency W of the signal-generating unit 40 (c£ Fig. 2) in which an actual 
value count can be determined after a predetermined temporal counting period. The circuit 
arrangement 100 also comprises a second digital counting unit 55 clocked at a reference 
5 frequency fref, in which a nominal value count can be determined after the predetermined 
temporal counting period. 

In the comparator unit 60, which is preceded by the first counting unit 50 and 
the second counting unit 55, the actual value count is then compared with the nominal value 
count, while the functions of the integrated circuit can be blocked and/or locked and/or 
1 0 interrupted temporarily or permanently in the case of an error indication which occurs when 
the actual value count is compared with the nominal value count (symbol in Fig. 2; when 
there is no error indication: symbol in Fig. 2), because in this case there is a change of the 
relative dielectricity value, i.e. a capacitance change, i.e. a frequency shift due to a 
manipulative and/or abusive attack on the shielding layer dielectric hi accordance with the 
1 5 correlations described hereinbefore. 

As can also be seen m Fig. 2, a differential evaluation imit 70 is constituted by 
the first counting unit 50, the second counting unit 55 and the comparator unit 60. This 
differential evaluation unit 70 is consequently implemented for determining the change of the 
specific capacitance C caused by an at least partial removal of the dielectric shielding layers 
20 30, 35, which evaluation unit 70 specifically generates the error indication when the actual 
value deviates from the nominal range. 

For a practical realization of the circuit arrangement 100 in accordance with 
the present invention, it is finally to be noted that the value of the specific capacitance C is 
dependent on the envisaged oscillator frequency fmeas. with the computation of the lateral 
25 parasitic capacitance C being based on the equivalent circuit diagram shown in Figs. 1 and 2. 
For example, it has proved that a lateral capacitance of about 29.740"^^ F m"^ is obtained in 
the layout when the conductor tracks 20, 25 have a distance d of about two micrometers. 
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100 


electric or electronic circuit arrangemeni 


10 


carrier substrate 


20 


first conductor track 


22 


contact terminal ol the iirst conductor tracK zu 


25 


second conductor track 


27 


contact terminal of the second conductor track 25 


30 


first dielectric shieloing layer, particularly passivation layer 


35 


second dielectric snielaing layer, panicuiariy lurxner proxet/uvc iciyci 


40 


signal-generating unit, particularly oscillator unit 


50 


first counting unit 


55 


second counting unit 


60 


comparator unit 


/U 


evaiuauon uiiii 






AP 


rhanae of the snecific caoacitance 




cr\(ar«i-fir» r»cir\i^r'it5innF^ nf tlip carrier '^iihstrate 10 


^-30 


SueClIlC Capd-ClLallVi/C UJL UiC lliov U.lwlv^^Liiv oiiiv.'i^J^iJ.xg i«*jr 




or\^r»if;n f»«nsir»it5inf»f» nf the Qprnnd dielectric shieldins laver 35 


d 


distance between the iirst conductor tracK zu ana tne secona conaucLor irct^^K 




25 


So 


field constant (so = 8.854240'^^ A s V"^ m"^) 


Si 


relative dielectricity value 


A8r 


change of the relative dielectricity value 


fmeas. 


output frequency of the signal-generating unit 40 


fref 


reference frequency 


1 


length of the conductor tracks 20, 25 


SiNOz 


silicon nitrite 


Si02 


silicon dioxide 



